JP7379436B2 - Image forming device - Google Patents

Description

The present invention relates to an image forming apparatus that can be accessed from an external device.

In recent years, as image forming devices have become more sophisticated, low-priced image forming devices are now equipped with network functions as standard, and image forming devices can be networked not only in large offices but also in small offices and ordinary homes. Opportunities to connect and use are increasing.

It is now possible to check the status and display settings of an image forming apparatus connected to a network using a web browser running on a personal computer (PC) via the network. A user interface (UI) installed in an image forming apparatus is called a local UI (LUI), and in contrast, a UI displayed on a web browser is called a remote UI (RUI).

Here, in large-scale offices, network managers and the like are assigned to take security measures, but in small-scale offices and ordinary homes, security measures may be insufficient. When an image forming apparatus without security measures is connected to a network, the RUI can be operated by external access, which may cause problems such as leakage of confidential information.

Patent Document 1 discloses that by performing secondary authentication in addition to normal authentication for accounts that have not been logged in for a long time (for example, accounts of employees who are absent due to long business trips or who have already left the company). Methods for increasing security have been disclosed.

Japanese Patent Application Publication No. 2006-178830

2. Description of the Related Art Conventionally, in image forming apparatuses, it is possible to set a password for authenticating access from the outside via a network. Furthermore, some image forming apparatuses have a function of setting a department ID and password to specify the department accessing the image forming apparatus, thereby managing access. In the department ID management mode, in addition to specifying the department that has access to the image forming device, you can also restrict the execution authority for specific functions (for example, copying and faxing) for each department ID, and set the output page when the function is executed. You can count the number of pages sent, etc.

Here, if the mode is set to perform department ID management, it can be determined that the image forming apparatus has security measures in place, and in this state, it is necessary to perform authentication processing for access from outside. This is redundant and impairs user convenience. Note that such problems are not limited to image forming apparatuses, but similarly exist in various information processing apparatuses that can communicate with external devices.

The present invention has been made to solve the above problems. An object of the present invention is to provide a mechanism for maintaining the security of an information processing device such as an image forming device that can communicate with an external device without impairing user convenience.

The present invention provides an image forming apparatus that can provide an external device with a remote user interface that can be viewed using a web browser, and includes means for authenticating a user by inputting a combination of a user ID and a user password in the external device; means for performing access authentication to enable access to the remote user interface by inputting an access password in the external device; means for configuring authentication settings for performing the access authentication; a first setting state in which access to the remote user interface from the external device is permitted based on access authentication and the user authentication; and a first setting state in which access to the remote user interface from the external device is permitted based on the access authentication and the user authentication; a second setting state that allows access to the remote user interface from the external device without authentication; and means for setting the remote user interface to one of a plurality of setting states, including : The screen information of the remote user interface includes at least information regarding the remaining amount of toner in the image forming apparatus .

According to the present invention, the security of an information processing device capable of communicating with an external device can be maintained without impairing user convenience.

Hardware configuration diagram of the image forming apparatus of this embodiment RUI screen transition diagram during normal authentication in Example 1 RUI screen transition diagram for RUI access PIN number in Example 1 RUI screen transition diagram when setting department ID management in Example 1 Flowchart illustrating RUI authentication screen display processing in Example 1 List of relationships between image forming device settings and RUI authentication screen in Embodiment 1 A diagram illustrating a setting screen in Example 1 Flowchart illustrating RUI authentication screen display processing in Example 2 List of relationships between image forming device settings and RUI authentication screen in Embodiment 2

EMBODIMENT OF THE INVENTION Hereinafter, the form for implementing this invention is demonstrated using drawings.

FIG. 1 is a block diagram showing the hardware configuration of an image forming apparatus 100 according to an embodiment of the present invention. Each block represents a module, and the arrows between blocks represent the flow of data or instructions.

As shown in FIG. 1, the image forming apparatus 100 is a multifunction peripheral (MFP) that includes a printing section 107, a reading section 109, an operation panel 110, a line I/F 112, and a controller section 101 that controls these. ). Note that the image forming apparatus 100 is not limited to a multifunction device, but may be a printer, a scanner, a facsimile, or the like.

The controller unit 101 includes a CPU 102, a RAM 103, a ROM 104, a printing unit I/F 106, a reading unit I/F 108, a MODEM 111, a USB-D I/F 115, a network I/F 118, and a USB-H I/F 122, and each block is a system They are connected via bus 105.

The CPU 102 comprehensively controls each of the blocks described above by executing various control programs. Note that the various control programs are executed by the CPU 102 reading out the control programs stored in the program area of the ROM 104. Alternatively, various control programs are executed by the CPU 102 expanding and expanding compressed data stored in the program area of the ROM 104 to the RAM 103. Further, the various control programs described above may be stored in a hard disk drive (HDD) (not shown) in a compressed state or an uncompressed state.

Network I/F 118 performs communication processing with host computer 121 via network (LAN) 120 or the like. Note that the host computer 121 is indicated as PC in the figure, and will be referred to as PC hereinafter. The network I/F 118 and the network 120 are connected by a communication cable such as a LAN cable 119. Further, the PC 121 can also be connected to the image forming apparatus 100 via the USB cable 116 and the USB-D I/F 115. Note that the network 120 may be a wireless network.

Note that a web browser 121a is operable on the PC 121, and the image forming apparatus 100 can be accessed from the PC 121 using the web browser 121a. Note that the PC 121 is not limited to a personal computer, and may be a tablet computer, a smartphone, or the like. Further, the configuration may be such that the image forming apparatus 100 can be accessed from the PC 121 using another client program instead of the Web browser 121a. Note that in this embodiment, a configuration will be described in which the image forming apparatus 100 is accessed from the PC 121 using the Web browser 121a, but the present invention is not limited to this.

The MODEM 111 is connected to a public line network 114 via a line I/F 112 and performs communication processing with other image forming apparatuses, facsimile machines, telephones, etc. (not shown). Line I/F 112 and public line network 114 are generally connected via telephone line 113 or the like.
USB-H I/F 122 is directly connected to external memory 123.

The printing unit I/F 106 serves as an interface for outputting image signals to the printing unit 107 (printer engine). Further, the reading unit I/F 108 serves as an interface for inputting a read image signal from the reading unit 109 (scanner engine). The CPU 102 processes the image signal input from the reading section I/F 108 and outputs it to the printing section I/F 106 as a recording image signal.

The CPU 102 uses font information stored in the font area of the ROM 104 to display characters and symbols on the display section of the operation panel 110, and receives instruction information from the operation panel 110 in response to user instructions.

Further, in the data area of the ROM 104, device information of the image forming apparatus 100, user telephone directory information, department management information, etc. are stored by the CPU 102, and are read by the CPU 102 as necessary and updated as necessary. Ru.
In this block diagram, the reading unit 109 and the printing unit 107 are located inside the image forming apparatus 100, but each or both may be located outside.

The image forming apparatus 100 can provide a user interface (remote user interface; RUI) that can be used from an external device such as the PC 121, and can be accessed from the web browser 121a of the PC 121 via a network or the like. , it is possible to refer to/change the settings of the image forming apparatus 100 from the RUI of the image forming apparatus 100.

Hereinafter, with reference to FIGS. 2 to 4, screen transitions of the RUI in the first embodiment will be illustrated. Here, the authentication screen when the RUI access password and department ID management are not set is called the normal authentication screen 202.

FIG. 2 is a diagram illustrating screen transitions of the RUI during normal authentication in the first embodiment.
When the RUI access password and department ID management are not set, when the image forming apparatus 100 is accessed from the PC 121, a normal authentication screen 202 is displayed on the display of the PC 121. The user 201 selects a radio button 202a on the normal authentication screen 202 displayed on the display of the PC 121 using the web browser 121a or the like of the PC 121, thereby determining whether to log in in administrator mode or general user mode, Press the login button 202d.

Note that if the login mode selected by the radio button 202a is the administrator mode, the administrator ID/administrator PIN has been correctly input in the administrator ID input field 202b/administrator PIN input field 202c. There is a need. On the other hand, if the login mode is general user mode, no particular authentication process is performed, so there is no need to input the administrator ID/administrator PIN into the administrator ID input field 202b/administrator PIN input field 202c. be.
If the authentication process is properly performed on the normal authentication screen 202, the RUI top screen 203 will be displayed (screen transition) and RUI access will be possible.

FIG. 3 is a diagram illustrating the RUI screen transition when the RUI access password is set in the first embodiment. Note that the same components as in FIG. 2 are given the same reference numerals.
When external access is restricted, when the image forming apparatus 100 is accessed from the PC 121, an RUI access password input screen 301 is displayed on the display of the PC 121. The RUI access password input screen 301 is a screen for performing authentication using the RUI access password (RUI access authentication screen).

The user 201 enters the set PIN in the RUI access PIN input 301a on the RUI access PIN input screen 301 displayed on the display of the PC 121 using the web browser 121a of the PC 121, etc., and presses the OK button 301b. do. If the input RUI access password is correct, the normal authentication screen 202 is displayed (screen transition), and thereafter the RUI top screen 203 is displayed in the same manner as the procedure shown in FIG. 2, and RUI access becomes possible.

FIG. 4 is a diagram showing screen transitions of the RUI when department ID management is set according to the first embodiment of the present invention. Note that the same components as in FIG. 2 are given the same reference numerals.
When department ID management is set, when the image forming apparatus 100 is accessed from the PC 121, a department ID management authentication screen 401 is displayed on the display of the PC 121.

On the department ID management authentication screen 401 displayed on the display of the PC 121 using the web browser 121a or the like of the PC 121, the user 201 enters the information of the department in which the user is registered in the department ID input field 401a/department PIN input field 401b. Enter the department ID/department password and press the login button 401c. If the entered department ID/department password is correct, the RUI top screen 203 will be displayed (screen transition) and RUI access will be possible.

FIG. 5 is a flowchart illustrating the RUI authentication screen display process in the first embodiment. Note that each step in this flowchart is realized by the CPU 102 reading and executing a program stored in the ROM 104 or the like.

When the image forming apparatus 100 receives a remote access request transmitted from the web browser 121a running on the PC 121, the CPU 102 starts the processing of this flowchart. Furthermore, in this flowchart, it is assumed that processes for which the subject of the process is not specified are executed by the CPU 102.

First, in step S501, the CPU 102 checks whether the use of the RUI itself is permitted. Then, if it is determined in S501 that the use of the RUI is not permitted (the RUI use setting shown in FIGS. 6 and 7 described later is OFF) (No in S501), the CPU 102 advances the process to S502. .

In S502, the CPU 102 controls to display an RUI unusable screen (a screen indicating that the use of the RUI (not shown) is not permitted (use prohibited)). That is, the CPU 102 transmits the display data of the RUI unavailable screen to the Web browser 121a running on the PC 121. Upon receiving the display data, the Web browser 121a displays the normal authentication screen 202 on the display of the PC 121 based on the display data. Upon completing the process of S502 above, the CPU 102 ends the process of this flowchart.

On the other hand, if it is determined in step S501 that the use of the RUI is permitted (RUI use setting is ON) (YES in step S501), the CPU 102 advances the process to step S503.
In S503, the CPU 102 determines whether department ID management is set. If it is determined that the department ID management setting is not set (department ID management setting shown in FIGS. 6 and 7 described later is OFF) (No in S503), the CPU 102 advances the process to S504.

In S504, the CPU 102 determines whether an RUI access password has been set. If it is determined that the RUI access password has been set (the RUI access password setting shown in FIGS. 6 and 7 described later is ON) (Yes in S504), the CPU 102 advances the process to S505.

In S505, the CPU 102 controls the RUI access password input screen 301 to be displayed. That is, the CPU 102 transmits the display data of the RUI access password input screen 301 to the Web browser 121a running on the PC 121. When the Web browser 121a receives the display data, it displays the RUI access password input screen 301 on the display of the PC 121 based on the display data.

When the CPU 102 receives the RUI access password entered by the user 201 on the RUI access password input screen 301 from the Web browser 121a running on the PC 121, the CPU 102 advances the process to S506.
In S506, the CPU 102 determines whether the RUI access password input by the user 201 is correct (matches the registered RUI access password). That is, the CPU 102 performs authentication processing using the RUI access password and determines the authentication result.

Then, if it is determined that the RUI access password entered by the user 201 is incorrect (No in S506), the CPU 102 controls to display the RUI access password input screen 301 again (S505).

On the other hand, if it is determined in S506 that the RUI access password input by the user 201 is correct (Yes in S506), the CPU 102 shifts the process to S507.

In S507, the CPU 102 controls the normal authentication screen 202 to be displayed. That is, the CPU 102 transmits the display data of the normal authentication screen 202 to the Web browser 121a running on the PC 121. Upon receiving the display data, the Web browser 121a displays the normal authentication screen 202 on the display of the PC 121 based on the display data.

Furthermore, even if it is determined in S504 that the RUI access PIN is not set (RUI access PIN setting is OFF) (No in S504), the CPU 102 displays the normal authentication screen 202. control (S507).

When the CPU 102 receives information such as the login mode selected by the user 201 on the normal authentication screen 202 from the Web browser 121a running on the PC 121, the CPU 102 advances the process to S508.
In S508, the CPU 102 determines whether the login mode selected by the user 201 is administrator mode (login in administrator mode).

If it is determined that the login mode selected by the user 201 is the administrator mode (login in administrator mode) (Yes in S508), the CPU 102 advances the process to S509.
In S509, the CPU 102 performs authentication processing in administrator mode based on the administrator ID and administrator authentication number received together with the login mode information, and determines the authentication result.

If it is determined that the authentication process has failed (No in S509), the CPU 102 controls the normal authentication screen 202 to be displayed again (S507).
On the other hand, if it is determined that the authentication process was successful (authentication process OK) (Yes in S509), the CPU 102 controls the RUI top screen 203 to be displayed. That is, the CPU 102 transmits the display data of the RUI top screen 203 to the Web browser 121a running on the PC 121. Upon receiving the display data, the Web browser 121a displays the RUI top screen 203 on the display of the PC 121 based on the display data.

Further, if it is determined in S508 that the login mode selected by the user 201 is the general user mode (No in S508), the CPU 102 controls to display the RUI top screen 203 without performing the authentication process. (S510).

Further, if it is determined in S503 that the department ID management setting is set (department ID management setting is ON) (Yes in S503), the CPU 102 advances the process to S511.
In S511, the CPU 102 controls the department ID management authentication screen 401 to be displayed. That is, the CPU 102 transmits the display data of the department ID management authentication screen 401 to the Web browser 121a running on the PC 121. When the Web browser 121a receives the display data, it displays the department ID management authentication screen 401 on the display of the PC 121 based on the display data.

When the CPU 102 receives the department ID and password input by the user 201 on the department ID management authentication screen 401 from the Web browser 121a running on the PC 121, the CPU 102 advances the process to S512.
In S512, the CPU 102 performs authentication processing using the department ID and password input by the user 201, and determines the authentication result.

If it is determined that the authentication process has failed (No in S512), the CPU 102 controls to display the department ID management authentication screen 401 again (S511).
On the other hand, if it is determined that the authentication process was successful (authentication process OK) (Yes in S512), the CPU 102 controls to display the RUI top screen 203 (S510). Upon completing the process of S510 above, the CPU 102 ends the process of this flowchart.

FIG. 6 is a list illustrating the relationship between the settings of the image forming apparatus and the authentication screen displayed on the RUI in the first embodiment.

FIG. 7 is a diagram illustrating a setting screen for RUI use permission, department ID management, and RUI access password in the first embodiment.
On the RUI usage permission setting screen 700, by selecting a radio button (ON/OFF) 700a, it is possible to set whether or not to allow RUI usage.
On the department ID management setting screen 701, by selecting a radio button (ON/OFF) 701a, it is possible to set whether or not to manage the department ID (department ID management setting). Note that when the department ID management setting is set, the CPU 102 authenticates and manages the use (access) of the image forming apparatus 100 for each department (that is, user group).

On the security setting screen 702, by selecting a radio button (ON/OFF) 702a, it is possible to set whether to restrict RUI access. Note that in the security setting screen 702, in the case of setting to restrict RUI access, the RUI access password can be set using the RUI access password input field 702b. In this manner, on the security setting screen 702, settings can be made to enable the use of the RUI to be restricted using password information (the RUI access password set in 702a).

It is assumed that the setting values set on the RUI usage permission setting screen 700, the department ID management setting screen 701, and the security setting screen 702 are stored in the data ROM of the ROM 104 under the control of the CPU 102. The ROM 104 is composed of a flash ROM, and data can be rewritten.

Note that the RUI usage permission setting screen 700, department ID management setting screen 701, and security setting screen 702 are displayed on the display section of the operation panel 110 under the control of the CPU 102. In addition, in the example shown in FIG. 7, on the RUI usage permission setting screen 700, the department ID management setting screen 701, and the security setting screen 702, the method of selecting whether or not to allow, restrict, and manage is to use radio buttons (700a, 701a, 702a). However, other means such as a drop-down list may be used.

As shown in Figure 6, if the RUI use permission setting is OFF, the RUI access prohibition screen will be displayed on the display of the PC 121 regardless of whether the department ID management setting or RUI access PIN setting is ON or OFF. , access from the PC 121 is prohibited.
In addition, if the RUI use permission setting is ON or the department ID management setting is ON, the department ID management authentication screen 401 will appear on the display of the PC 121 regardless of whether the RUI access PIN setting is ON or OFF. is displayed, and access from the PC 121 is permitted and controlled through authentication using the department ID and department PIN number.

In addition, if the RUI use permission setting is ON, the department ID management setting is OFF , and the RUI access PIN setting is ON, the RUI access PIN input screen 301 is displayed on the display of the PC 121, and the RUI access PIN input screen 301 is displayed. Access from the PC 121 is permitted and controlled by number authentication.
Further, when the RUI use permission setting is ON, the department ID management setting is OFF, and the RUI access password setting is OFF, the normal authentication screen 202 is displayed on the display of the PC 121.

As shown in FIG. 6, when department ID management is set to ON on the department ID management setting screen 701, according to this embodiment, when a remote access request is made, regardless of the setting of RUI access restriction, The RUI access password input screen 301 is not displayed. Therefore, when department ID management is ON, setting RUI access restrictions and entering RUI access PIN on the security setting screen 702 have no meaning, so under the control of the CPU 102, settings of RUI access restrictions and Another example is to gray out the input item for the RUI access password so that it cannot be input.
Furthermore, even when RUI usage permission is set to OFF on the RUI usage permission setting screen 700, the RUI access restriction settings and RUI access PIN input items are grayed out and cannot be entered under the control of the CPU 102. You may also do so.

As described above, according to the first embodiment, when an external access PIN number (RUI access PIN number) is set, an image forming apparatus that enables access via the network by authentication using the external access PIN number , if the image forming apparatus is set to department ID managed mode (department ID management is ON), authentication using the external access PIN is performed regardless of whether an external access PIN is set. The configuration is such that access via the network is enabled by authentication using the department ID and department password registered in the department ID management. With this configuration, if security measures other than authentication using an external access PIN (department ID management settings in this case) are implemented, redundant security measures such as authentication using an external access PIN must be performed in this state will be implemented. This eliminates the need to force users to perform other operations. Therefore, it is possible to provide an image forming apparatus that can maintain security without impairing user convenience.

In the first embodiment described above, in the image forming apparatus 100, whether or not to restrict RUI access when department ID management is not performed is managed based on whether or not an RUI access password is set. Note that if the system administrator is set correctly, there is likely to be little problem since the settings of the image forming apparatus 100 cannot be changed even if the RUI is accessed with user mode authority. It may be configured to control whether or not access to the RUI is restricted depending on the presence or absence of the RUI. This configuration will be described below in Example 2. Note that in the second embodiment, only the differences from the first embodiment will be described.

FIG. 8 is a flowchart illustrating the RUI authentication screen display process in the second embodiment. Note that each step in this flowchart is realized by the CPU 102 reading and executing a program stored in the ROM 104 or the like.
When the image forming apparatus 100 receives a remote access request transmitted from the web browser 121a running on the PC 121, the CPU 102 starts the processing of this flowchart. Furthermore, in this flowchart, it is assumed that processes for which the subject of the process is not specified are executed by the CPU 102.

First, steps S801 to S803 and S809 to S810 are the same as the processing of S501 to S503 and S511 to S512 in FIG. 5, so the explanation will be omitted.
Note that if it is determined in S803 that department ID management settings have not been made (No in S803), the CPU 102 advances the process to S804.

In S804, the CPU 102 determines whether a system administrator has been set. Note that the system administrator setting is a setting in which a specific user or department (user group) is set as the administrator of the image forming apparatus 100 and is given administrator authority for the image forming apparatus 100. The administrator authority is, for example, an authority that allows all access to the image forming apparatus 100.

If it is determined that the system administrator is not set (the system administrator setting shown in FIG. 9 described later is OFF) (No in S804), the CPU 102 displays the RUI unavailable screen (not shown) in S802. control to display a screen indicating that use of the RUI is not permitted. Note that S802 is the same as the process of S502 in FIG. 5, so details will be omitted.

On the other hand, if it is determined in S804 that a system administrator has been set (system administrator setting is ON) (Yes in S804), the CPU 102 executes the processes in S805 to S808. Steps S805 to S808 are the same as steps S507 to S510 in FIG. 5, so the explanation will be omitted.

FIG. 9 is a list illustrating the relationship between the settings of the image forming apparatus and the authentication screen displayed on the RUI in the second embodiment. Note that only the points different from FIG. 6 shown in Example 1 will be explained.
When the RUI use permission setting is OFF, when the RUI use permission setting is ON, and when the department ID management setting is ON, the explanation is omitted because it is the same as in the first embodiment.

When the RUI use permission setting is ON, the department ID management setting is OFF, and the system administrator setting is ON, the normal authentication screen 202 is displayed on the display of the PC 121.
Additionally, if the RUI use permission setting is ON and the department ID management setting is OFF, or if the system administrator setting is OFF, an RUI access prohibition screen will be displayed on the display of the PC 121, and the RUI access prohibition screen will be displayed on the PC 121 display. Access is prohibited.

As described above, according to the second embodiment, if a system administrator is set, access via the network (RUI) is possible, and if a system administrator is not set, access via the network is possible. (RUI) is not possible, and if the image forming apparatus is set to department ID management mode (department ID management is ON), the system administrator's setting is ON/OFF. Regardless of whether it is OFF, the configuration allows access via the network by authentication using the department ID and department PIN registered in department ID management, without authentication using the system administrator's administrator ID and administrator PIN. do. With this configuration, if security measures other than authentication using the administrator ID (in this case, department ID management settings) have been implemented, further authentication using the administrator ID and administrator PIN must be performed in this state. This eliminates the need to force the user to perform such redundant operations. Therefore, it is possible to provide an image forming apparatus that can maintain security without impairing user convenience.

Note that, as a security measure other than the authentication using the RUI access password in the first embodiment or the authentication using the administrator authentication information in the second embodiment, there is a method for authenticating and managing access to the image forming apparatus 100 for each user group. The case where the settings (department ID management settings) have been made has been described. However, security measures other than authentication using the RUI access password or authentication using administrator authentication information are not limited to these.

For example, settings (user ID management settings) for authenticating and managing the use (access) of the image forming apparatus 100 for each user may be configured. When an RUI access request is received from the PC 121 in a state where user ID management settings have been made, the CPU 102 controls to display a user ID management authentication screen that requests authentication using a user ID and user ID password. . That is, the CPU 102 transmits the display data of the user ID management authentication screen to the Web browser 121a running on the PC 121. Upon receiving the display data, the Web browser 121a displays a user ID management authentication screen on the display of the PC 121 based on the display data. When the CPU 102 receives the user ID and password input by the user from the user ID management authentication screen, the CPU 102 performs authentication processing using the user ID and password. If it is determined that the authentication process has failed, the CPU 102 controls the user ID management authentication screen to be displayed again. On the other hand, if it is determined that the authentication process was successful (authentication process OK), the CPU 102 controls the RUI top screen 203 to be displayed.

Further, in each of the embodiments described above, the RUI of the image forming apparatus 100 may be configured to be usable from the PC 121 via the network 120 or may be configured to be usable from the PC 121 via an interface other than the network such as the USB cable 116.

Furthermore, in the image forming apparatus 100 of each of the embodiments described above, the control when providing a user interface (RUI) that can be used from an external device such as the PC 121 has been described, but control of access other than the RUI may also be used. Any type of access control may be used as long as it is access to functions that can be provided by the forming apparatus 100.

Furthermore, although the image forming apparatus that can be accessed from an external device such as the PC 121 has been described, the present invention is not limited to the image forming apparatus, and may be an information processing apparatus other than the image forming apparatus. For example, it may be a personal computer, a networked home appliance, or the like. The present invention is applicable to any information processing device that can provide functions that can be accessed and used from an external device.

As shown above, if security measures other than authentication using the access PIN or administrator authentication information have been implemented, there may be cases where additional authentication using the access PIN or administrator authentication information is required in this state. Users are no longer forced to perform redundant operations. Therefore, it is possible to provide an information processing apparatus such as an image forming apparatus that can maintain security without impairing user convenience.
Therefore, according to the present invention, it is possible to maintain the security of an information processing apparatus such as an image forming apparatus that can be accessed via a network without impairing user convenience.

It goes without saying that the configurations and contents of the various data described above are not limited to these, and may be configured in various configurations and contents depending on the use and purpose.
Although one embodiment has been described above, the present invention can be implemented as, for example, a system, an apparatus, a method, a program, a storage medium, or the like. Specifically, the present invention may be applied to a system consisting of a plurality of devices, or may be applied to a device consisting of a single device.
Further, all configurations in which the above embodiments are combined are also included in the present invention.

(Other examples)
Further, the present invention can also be realized by executing the following processing. That is, the software (program) that realizes the functions of the embodiments described above is supplied to a system or device via a network or various storage media, and the computer (or CPU, MPU, etc.) of the system or device reads the program. This is the process to be executed.
Furthermore, the present invention may be applied to a system made up of a plurality of devices, or to a device made up of one device.
The present invention is not limited to the above embodiments, and various modifications (including organic combinations of each embodiment) are possible based on the spirit of the present invention, and such modifications are excluded from the scope of the present invention. isn't it. That is, all configurations that are combinations of the above-described embodiments and their modifications are also included in the present invention.

100 Image forming apparatus 120 Network 121 Personal computer (PC)

Claims (13)

An image forming apparatus capable of providing an external device with a remote user interface that can be viewed using a web browser,
means for performing user authentication by inputting a combination of a user ID and a user password in the external device;
means for performing access authentication to enable access to the remote user interface by inputting an access password on the external device;
means for configuring authentication settings for performing the access authentication;
a first setting state in which access to the remote user interface from the external device is permitted based on the access authentication and the user authentication with the authentication setting set;
a second setting state in which the external device is allowed to access the remote user interface without the access authentication based on the user authentication when the authentication setting is not set; means for setting the setting state to one of the setting states ,
An image forming apparatus , wherein the screen information of the remote user interface includes at least information regarding a remaining amount of toner in the image forming apparatus . An image forming apparatus capable of providing an external device with a remote user interface that can be viewed using a web browser,
means for performing user authentication by inputting a combination of a user ID and a user password in the external device;
means for performing access authentication to enable access to the remote user interface by inputting an access password on the external device;
means for configuring authentication settings for performing the access authentication;
a first setting state in which access to the remote user interface from the external device is permitted based on the access authentication and the user authentication with the authentication setting set;
a second setting state in which the external device is allowed to access the remote user interface without the access authentication based on the user authentication when the authentication setting is not set; means for setting the setting state to one of the setting states ,
An image forming apparatus , wherein the screen information of the remote user interface includes at least information regarding paper feeding of the image forming apparatus . 3. The image forming apparatus according to claim 1 , further comprising means for outputting screen information of the remote user interface to the external device. means for outputting screen information for inputting the access password in the first setting state without outputting screen information for inputting the access password to the external device in the second setting state; The image forming apparatus according to any one of claims 1 to 3, characterized in that: 5. The second setting state is a setting state in which the combination of the user ID and user password is used for authentication, and the access password is not used for authentication. Image forming device. 6. The image forming apparatus according to claim 1, wherein the user ID is information associated with execution authority for a function provided in the image forming apparatus, and includes an administrative user ID. 7. In the third setting state in which provision of the remote user interface is prohibited, screen information for causing the external device to display an error screen is outputted. Image forming device. The image forming apparatus according to claim 1, wherein the screen information of the remote user interface includes at least information regarding the status of the image forming apparatus. The image forming apparatus according to claim 1, wherein the screen information of the remote user interface includes at least information regarding an error in the image forming apparatus. a display section that displays information;
The image forming apparatus according to any one of claims 1 to 9, further comprising means for displaying on the display section a screen for registering the access password. The image forming apparatus according to any one of claims 1 to 10 , characterized in that authentication can be performed using an administrator ID and an administrator password. Claims 1 to 10 , characterized in that when the access password, the user ID, and the user password are input to the external device, data is sent to the image forming device to perform the access authentication and the user authentication. The image forming apparatus according to any one of the above. The image forming apparatus according to claim 1 , wherein the access authentication is authentication for using the remote user interface.

Images